74
/ 100
21 days ago
glama

EVOKORE-MCP

Multi-server MCP aggregator with 266 skills, an orchestration runtime, fleet/claims coordination, and hook-driven session governance for autonomous Claude/Cursor/Gemini agent runs.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
34 tools verified — handlers match their declared behaviour
8 read-only tools verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 16 credentials: ELEVENLABS_API_KEY, EVOKORE_AUDIT_EXPORT_SECRET, EVOKORE_AUTH_TOKEN, EVOKORE_DASHBOARD_APPROVAL_WS_TOKEN, EVOKORE_DASHBOARD_TOKEN, EVOKORE_TELEMETRY_EXPORT_SECRET, EVOKORE_TTS_API_KEY, EVOKORE_WS_ALLOW_QUERY_TOKEN, OPENAI_API_KEY, VOYAGE_API_KEY, ANTHROPIC_API_KEY, GITHUB_TOKEN, DB_PASSWORD, PAGERDUTY_API_KEY, CONFLUENCE_API_TOKEN, CONFLUENCE_SPACE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highws@8.19.0GHSA-96hv-2xvq-fx4p

ws: Memory exhaustion DoS from tiny fragments and data chunks

ws: Uninitialized memory disclosure

lowyaml@2.8.2GHSA-48c2-rrv3-qjmp

yaml is vulnerable to Stack Overflow via deeply nested YAML collections

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCLAUDE_BASH_MAX_CONCURRENT
configCLAUDE_CODE_SESSION_ID
configCLAUDE_HOOK_SKIP_BASH_THROTTLE
configCLAUDE_HOOK_SKIP_READ_CHECK
configCLAUDE_SESSION_ID
configDISABLE_THOUGHT_LOGGING
🔐 secretELEVENLABS_API_KEY
configEVOKORE_AUDIT_EXPORT
configEVOKORE_AUDIT_EXPORT_BATCH_SIZE
configEVOKORE_AUDIT_EXPORT_INTERVAL_MS
🔐 secretEVOKORE_AUDIT_EXPORT_SECRET
configEVOKORE_AUDIT_EXPORT_URL
configEVOKORE_AUDIT_LOG
configEVOKORE_AUTH_MODE
configEVOKORE_AUTH_REQUIRED
🔐 secretEVOKORE_AUTH_TOKEN
configEVOKORE_AUTO_ACTIVATION_REQUIRE_TRUTH_SCORE
configEVOKORE_AUTO_MEMORY_SYNC
configEVOKORE_CHILD_SERVER_BOOT_TIMEOUT_MS
configEVOKORE_CONTINUE_GATE
🔐 secretEVOKORE_DASHBOARD_APPROVAL_WS_TOKEN
configEVOKORE_DASHBOARD_APPROVAL_WS_URL
configEVOKORE_DASHBOARD_PORT
configEVOKORE_DASHBOARD_ROLE
🔐 secretEVOKORE_DASHBOARD_TOKEN
configEVOKORE_DEBUG
configEVOKORE_HOME
configEVOKORE_HOME_OVERRIDE
configEVOKORE_HTTP_ALLOW_PRIVATE
configEVOKORE_HTTP_HOST
configEVOKORE_HTTP_MODE
configEVOKORE_HTTP_PORT
configEVOKORE_MCP_CONFIG_PATH
configEVOKORE_OAUTH_AUDIENCE
configEVOKORE_OAUTH_ISSUER
configEVOKORE_OAUTH_JWKS_URI
configEVOKORE_PANEL_MAX_CONCURRENCY
configEVOKORE_PLUGINS_DIR
configEVOKORE_PROXY_REQUEST_TIMEOUT_MS
configEVOKORE_REDIS_KEY_PREFIX
configEVOKORE_REDIS_URL
configEVOKORE_RELEASE_PREFLIGHT_SKIP_SECRETS
configEVOKORE_ROLERBAC permissions (admin / developer / readonly) for proxied tools [permissions.yml](permissions.yml), env var
configEVOKORE_SANDBOX_CPU_LIMIT
configEVOKORE_SANDBOX_MEMORY_MB
configEVOKORE_SANDBOX_MODE
configEVOKORE_SANDBOX_PREPULL
configEVOKORE_SANDBOX_SECCOMP_PROFILE
configEVOKORE_SECURITY_DEFAULT_DENY
configEVOKORE_SESSION_ID
configEVOKORE_SESSION_STORE
configEVOKORE_SESSION_TTL_MS
configEVOKORE_SKILL_GRAPH_PATH
configEVOKORE_SKILL_WATCHER
configEVOKORE_STATUS_HOOK
configEVOKORE_STEERING_MODE
configEVOKORE_STT_ENABLED
configEVOKORE_STT_LOCAL_MODEL
configEVOKORE_STT_MODEL
configEVOKORE_STT_PROVIDER
configEVOKORE_SYNC_PROJECT_ROOT
configEVOKORE_TELEMETRY
configEVOKORE_TELEMETRY_DIR
configEVOKORE_TELEMETRY_EXPORT
configEVOKORE_TELEMETRY_EXPORT_INTERVAL_MS
🔐 secretEVOKORE_TELEMETRY_EXPORT_SECRET
configEVOKORE_TELEMETRY_EXPORT_URL
configEVOKORE_TENANT_SCOPING
configEVOKORE_TILLDONE_IDLE_TIMEOUT_MS
configEVOKORE_TILLDONE_MAX_BLOCKS
configEVOKORE_TILLDONE_MODE
configEVOKORE_TOOLS_LIST_CHANGED_DEBOUNCE_MS
configEVOKORE_TOOL_DISCOVERY_MODE
configEVOKORE_TOOL_LIST_PAGE_SIZE
configEVOKORE_TOOL_LIST_PAGINATION
configEVOKORE_TOOL_SCHEMA_FALLBACK_MS
configEVOKORE_TOOL_SCHEMA_MODE
configEVOKORE_TRUST_LEDGER_GUARD
configEVOKORE_TRUTH_SCORE_EVIDENCE_WINDOW
configEVOKORE_TRUTH_SCORE_THRESHOLD
🔐 secretEVOKORE_TTS_API_KEY
configEVOKORE_TTS_BASE_URL
configEVOKORE_TTS_MODEL
configEVOKORE_TTS_PROVIDER
configEVOKORE_TTS_VOICE
configEVOKORE_WEBHOOKS_ALLOW_PRIVATE
configEVOKORE_WEBHOOKS_ENABLED
configEVOKORE_WHISPER_PATH
configEVOKORE_WORKERS_ENABLED
configEVOKORE_WORKER_AUTODISPATCH
🔐 secretEVOKORE_WS_ALLOW_QUERY_TOKEN
configEVOKORE_WS_APPROVALS_ENABLED
configEVOKORE_WS_HEARTBEAT_MS
configEVOKORE_WS_MAX_CLIENTS
configGITHUB_OWNER
configGZIP_ALLOWED_DOMAINS
configGZIP_MAX_FETCH_SIZE
configGZIP_MAX_FETCH_TIME_MILLIS
configMEMORY_FILE_PATH
configOPENAI_API_BASE_URL
🔐 secretOPENAI_API_KEY
configPORT
configSESSION_ID
configVOICE_SIDECAR_ARTIFACT_DIR
configVOICE_SIDECAR_DISABLE_PLAYBACK
configVOICE_SIDECAR_HOST
configVOICE_SIDECAR_MAX_CONNECTIONS
configVOICE_SIDECAR_PERSONA
configVOICE_SIDECAR_PORT
🔐 secretVOYAGE_API_KEY
🔐 secretANTHROPIC_API_KEY
🔐 secretGITHUB_TOKEN
configDB_HOST
configDB_PORT
configDB_NAME
configDB_USER
🔐 secretDB_PASSWORD
configDB_POOL_SIZE
configDB_POOL_TIMEOUT
configSERVICE_NAME
configAPI_HOST
configAPI_PORT
configREQUESTS_PER_SECOND
🔐 secretPAGERDUTY_API_KEY
configPAGERDUTY_SERVICE_ID
configPAGERDUTY_FROM_EMAIL
configCONFLUENCE_BASE_URL
🔐 secretCONFLUENCE_API_TOKEN
configCONFLUENCE_USER_EMAIL
🔐 secretCONFLUENCE_SPACE_KEY
configCONFLUENCE_PARENT_PAGE_ID
configANTHROPIC_MODEL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mattmre-evokore-mcp-public-lrww5c)](https://m8ven.ai/mcp/mattmre-evokore-mcp-public-lrww5c)
commit: 1b3fea54893b0054bcea05286803ca0abae6b91b
code hash: dbae604f74937da4d581039c6e839eea93dbdb2fb8dcc2c923682c88c42e7f79
verified: 6/18/2026, 11:44:05 AM
view raw JSON →